← Back to CVEs
CVE-2020-3909
CRITICAL9.8
Description
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for Windows 12.10.5, iCloud for Windows 10.9.3, iCloud for Windows 7.18. Multiple issues in libxml2.
CVE Details
CVSS v3.1 Score9.8
SeverityCRITICAL
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published4/1/2020
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0
Affected Products
apple:icloudapple:ipadosapple:iphone_osapple:itunesapple:mac_os_xapple:tvosapple:watchosoracle:sun_zfs_storage_appliance_kit_software
Weaknesses (CWE)
CWE-120
References
https://support.apple.com/HT211100(product-security@apple.com)
https://support.apple.com/HT211101(product-security@apple.com)
https://support.apple.com/HT211102(product-security@apple.com)
https://support.apple.com/HT211103(product-security@apple.com)
https://support.apple.com/HT211105(product-security@apple.com)
https://support.apple.com/HT211106(product-security@apple.com)
https://support.apple.com/HT211107(product-security@apple.com)
https://www.oracle.com/security-alerts/cpuoct2020.html(product-security@apple.com)
https://support.apple.com/HT211100(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT211101(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT211102(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT211103(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT211105(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT211106(af854a3a-2127-422b-91ae-364da2661108)
https://support.apple.com/HT211107(af854a3a-2127-422b-91ae-364da2661108)
https://www.oracle.com/security-alerts/cpuoct2020.html(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.